LOLDriversTHE DRIVER THREAT CATALOG
← Back to driver explorer
Driver intelligenceVulnerableUnverified

NetFlt.sys

Description not recorded.

UUID / 30d6c39c-1d93-4101-8dd3-322ff0ab7fb3ADDED / 2023-01-09AUTHOR / Michael Haag

The project has not confirmed this driver's sample hashes.

Known samples 2

0 recorded TRUE · 2 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.

NetFlt.sysSample 1 · HVCI FALSE
Authentihash SHA1
b04ecc8dd0d52fe4552d2c4d693d67fae20c460f
Authentihash SHA256
f8886a9c759e0426e08d55e410b02c5b05af3c287b15970175e4874316ffaf13
Machine
Not recorded
Version
Not recorded
Publisher
Not recorded
NetFlt.sysSample 2 · HVCI FALSE
MD5
165178829b5587a628977bfca6fd6900
SHA1
e3048cd05573dc1d30b1088859bc728ef67aaad0
SHA256
760be95d4c04b10df89a78414facf91c0961020e80561eee6e2cb94b43b76510
Imphash
9c8c681f74950997cd571fd838a847b8
Authentihash MD5
e6afe5e6540dab647a06673be116690b
Authentihash SHA1
b04ecc8dd0d52fe4552d2c4d693d67fae20c460f
Authentihash SHA256
f8886a9c759e0426e08d55e410b02c5b05af3c287b15970175e4874316ffaf13
Machine
AMD64
Version
10.0.0.2
Publisher
Not recorded
Download vulnerable sampleView on VirusTotal

Recorded command

sc.exe create NetFlt.sys binPath=C:\windows\temp\NetFlt.sys type=kernel && sc.exe start NetFlt.sys

Elevate privileges · Privileges: kernel · OS: Windows 10

Research & references